Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikonVC8 -> Microsoft Corporation
[Authenticode]_11038bef.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.unwante
_RDATA
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
PDF @0x01179437
97604eaa0c7671c85336cb11e0e35567
0x00FA4D3A.svg
0x011329E2.svg
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x1659800 size 10512 bytes
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #7 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #10 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #16 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17 URIsuspect
http:huhuhuhuhuhuhu
URLs in VB Code - #18 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #19 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #21 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #22 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #23 URIsuspect
fihuhuhuhu
URLs in VB Code - #24 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #25 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #26 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #27 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #28 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #29 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #30 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #31 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #32 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #33 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #34 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #35 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #36 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #37 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #38 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #39 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #40 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #41 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #42 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #43 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #44 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #45 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #46 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #47 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #48 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #49 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #50 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #51 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #52 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #53 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #54 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #55 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #56 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #57 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #58 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #59 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #60 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #61 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #62 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #63 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #64 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #65 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #66 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #67 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #68 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #69 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #70 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #71 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙